Privacy Policy
Last updated: April 4, 2026
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your name, email, and profile picture from your Google account.
Usage Data
We collect information about how you use the Service, including recording history, clip downloads, and feature usage. This helps us improve the Service and detect abuse.
Payment Information
Payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full card details. We only store your Stripe customer ID and transaction records.
2. How We Use Your Information
- To provide and maintain the Service
- To process payments and manage subscriptions
- To send important service-related communications
- To detect and prevent fraud and abuse
- To improve the Service based on usage patterns
3. Data Storage and Security
Your account data is stored in a PostgreSQL database hosted by Neon (AWS US East). Recordings and clips are stored in Cloudflare R2 object storage. All data is transmitted over HTTPS with TLS encryption. Passwords are hashed using bcrypt with a work factor of 12.
4. Data Retention
Recordings are automatically deleted after your plan's retention period (7, 30, or 60 days). Account data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time.
5. Third-Party Services
We use the following third-party services:
- Stripe — payment processing
- Google — OAuth authentication
- Vercel — application hosting
- Neon — database hosting
- Cloudflare — file storage
- Render — background worker hosting
Each of these services has their own privacy policy governing their handling of data.
6. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Export your data in a portable format
- Withdraw consent for data processing
8. Children's Privacy
The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email.
10. Contact
For privacy-related inquiries, contact us at privacy@streamstash.live.